diff options
| -rw-r--r-- | src/fextdata.php | 2 | ||||
| -rw-r--r-- | src/site/getsite.php | 3 |
2 files changed, 3 insertions, 2 deletions
diff --git a/src/fextdata.php b/src/fextdata.php index cf42fc0..6acffaa 100644 --- a/src/fextdata.php +++ b/src/fextdata.php @@ -247,7 +247,7 @@ function getMainXML() { // LOGError("ok=" . $ok); if(substr($ok,strlen($ok)-strlen('TRANSFER OK'),strlen('TRANSFER OK')) == 'TRANSFER OK') { - $data = encryptData(generateSiteXML($contest, $localsite, $updatetime-30),myhash(myhash(trim($sitedata[2])) . $sess)); + $data = encryptData(generateSiteXML($contest, $localsite, $updatetime-30),myhash(trim($sitedata[2]))); $data_url = http_build_query(array('xml' => $data, 'updatetime' => ($updatetime-30) )); diff --git a/src/site/getsite.php b/src/site/getsite.php index 49b5fd2..3948d74 100644 --- a/src/site/getsite.php +++ b/src/site/getsite.php @@ -32,8 +32,9 @@ if($ct["contestlocalsite"]==$ct["contestmainsite"]) { if($fromsite != '' && is_numeric($fromsite) && $fromsite > 0) { if(isset($_POST)) { if(isset($_POST['xml'])) { + $u = DBUserInfo($_SESSION["usertable"]["contestnumber"], $_SESSION["usertable"]["sitenumber"], $_SESSION["usertable"]["usernumber"],null,false); // $fp=fopen('/tmp/aaa',"w"); fwrite($fp,$_POST['xml']); fclose($fp); - $s = decryptData(rawurldecode($_POST['xml']),$_SESSION["usertable"]["userpassword"],'xml from local not ok'); + $s = decryptData(rawurldecode($_POST['xml']),$u["userpassword"],'xml from local not ok'); // $fp=fopen('/tmp/aaa1',"w"); fwrite($fp,$s); fclose($fp); if(strtoupper(substr($s,0,5)) != "<XML>") { echo "<!-- <ERROR8> ".session_id() . " -->\n"; |